nerdexam
IAPP

CIPM · Question #246

If your organization has a recurring issue with colleagues not reporting personal data breaches, all of the following are advisable to do EXCEPT?

The correct answer is D. Distribute a phishing exercise to all employees to test their ability to recognize a threat attempt. See the full explanation below for the reasoning.

Question

If your organization has a recurring issue with colleagues not reporting personal data breaches, all of the following are advisable to do EXCEPT?

Options

  • AReview reporting activity on breaches to understand when incidents are being reported and when
  • BImprove communication to reinforce to everyone that breaches must be reported and how they
  • CProvide role-specific training to areas where breaches are happening so they are more aware.
  • DDistribute a phishing exercise to all employees to test their ability to recognize a threat attempt.

How the community answered

(32 responses)
  • A
    16% (5)
  • B
    3% (1)
  • C
    9% (3)
  • D
    72% (23)

Community Discussion

No community discussion yet for this question.

Full CIPM Practice